Security and compliance
Your data
stays yours.
How we handle payroll records, student files and client details across our products.
How we protect your records.
Encryption
Data is encrypted in transit over TLS/HTTPS, and encrypted at rest.
Access control
Role-based access limits who sees what. Admin accounts use multi-factor authentication.
Your data is yours
We don't sell or trade your data. You can export your records.
AI in our products
The assistant can only do what you can do.
Assistants in Arche HR, Cogitus, Arbor and Bohari IMS follow the signed-in user's permissions. Actions are logged against that account; Bohari IMS also keeps a dedicated AI audit log.
Vuka OS's Fundi agent drafts and proposes. Spending money or messaging fans requires the artist's explicit approval. Unapproved proposals expire after 72 hours.
See what each product doesBuilt around the DPA 2019
Registered, and accountable.
We follow Kenya's Data Protection Act, 2019. If a personal-data breach ever affects you, we will notify the Office of the Data Protection Commissioner within 72 hours, as the Act requires.
We are registered with the ODPC as a data processor, No. 659-2062-E512. Our full data-handling practices are written out in the Privacy Policy.